Hacker News Reader

p0ccon Pages that didn't make it into “How DNS Works”

Cheeky. I love it!

SSL was the latest standard until 1999, when TLS 1.0 was released.

Per RFC 2246 [0], "The differences between this protocol [TLS 1.0] and SSL 3.0 are not dramatic, but they are significant enough to preclude interoperability between TLS 1.0 and SSL 3.0"

SSL/TLS Versions 1995-present: https://en.wikipedia.org/wiki/Transport_Layer_Security#Histo...

[0]: https://datatracker.ietf.org/doc/html/rfc2246

p0ccon MHDDoS – DDoS Attack Script with 36 Method

I was excited to see how they got Cloudflare's origin server IP address:

            if cmd in ["CFIP", "DNS"]:
                print("Soon")
                continue

Looks like I'll have to wait :/

p0ccon Stop the Earn IT Act to Save Our Privacy

If you are a techie living in California, contact Diane Feinstein, who is one of the co-sponsors of EARN IT.

You can contact her here: https://www.feinstein.senate.gov/public/index.cfm/contact

---

Senate Press Release on this topic: https://www.judiciary.senate.gov/press/rep/releases/graham-b...

p0ccon Ask HN: Is Cloudflare Down?

Check https://www.cloudflarestatus.com/

p0ccon SICP – JavaScript Version (2022) [pdf]

This clicks with me more than SICP with Scheme. Skimming through it, I like the example using a recursive summation function to approximate the integral of a cubic.

p0ccon A fuel spill from the U.S. Navy poisons the water of thousands in Hawaiʻi

https://en.wikipedia.org/wiki/FSO_Safer

This is a disaster waiting to happen. If it spilled, it would disrupt the Suez Canal and jeopardize the livelihoods of 1.7 million people who depend on fish.

p0ccon Yan tan tethera: A Celtic sheep-counting system

Thanks for sharing. Hearing it spoken aloud highlights how the numbers flow into each other, almost like the letters LMNO in the alphabet.

p0ccon Adversarial Wordle

@zeebeecee In word.js, why do you have a list of `impossibleWords`? Many of them are valid English words, like FEARS.

p0ccon A public letter to CloudFlare to fix their snoopy vendor

These are the five SSL options for a Cloudflare website [0]:

1. No SSL: User <--HTTP--> Cloudflare <--HTTP--> Origin Server

2. Flexible SSL: User <--HTTPS--> Cloudflare <--HTTP--> Origin Server

3. Full SSL: User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; Self-signed cert ok, expired cert ok

4. Full SSL (strict): User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; Origin server must use an SSL certificate that Cloudflare provides [1]

5. Strict (SSL-Only Origin Pull): User <--HTTPS--> Cloudflare <--HTTPS--> Origin Server; same as Full SSL (strict), but you pay need to pay Cloudflare more money

---

3 and above will fix this issue as they encrypt from Cloudflare to the Origin Server.

This is the traffic flow from the link:

User -> Cloudflare -> Airtel -> GitHub Pages

Where the connection with flexible SSL is Cloudflare <--HTTP--> GitHub Pages.

Upgrading to Full SSL (or higher) and using HTTPS on GitHub [2] should fix.

---

Alternatively, deploy your static website with Cloudflare Pages [3], which has feature parity with Github Pages.

The flow would then be: User <--HTTPS--> Cloudflare Pages

[0]: https://developers.cloudflare.com/ssl/origin-configuration/s...

[1]: https://developers.cloudflare.com/ssl/origin-configuration/o...

[2]: https://docs.github.com/en/pages/getting-started-with-github...

[3]: https://pages.cloudflare.com/

EDIT: The replies by kentonv, x1110dc, and r1ch all have valid points.

p0ccon Seconds before a 6.2 earthquake rattled California, phones got a warning

I live in Humboldt County, so I got one of these notifications. Mine arrived 5 seconds after the earthquake, and several of the people on my discord server got it 2-5s after the earthquake. One person got it a couple seconds before.

Relevant XKCD: https://xkcd.com/723/

p0ccon The Free Territory of Trieste (1947–1954)

They may have happened in the same region, but it looks like Operation Sunrise happened in spring 1945 in the Northern Italian region. Whereas, the Free Territory of Treiste was a microstate artifact of a WWII.

p0ccon Ask HN: Who wants to be hired? (June 2020)

  Location: San Francisco
  Remote: Yes
  Willing to relocate: Anywhere
  Technologies: Python, Go, Bash, Typescript, Javascript, HTML, CSS, Deep knowledge of TCP/IP stack, Wireshark, Scapy
  Résumé/CV: https://swit.sh/resume
  Email: rj АT swit.sh
  Github: github.com/pocc
  Stack Overflow: https://stackoverflow.com/users/1596750
  
  I have 4 years of experience as as network engineer and want to focus more on programming/automation. 
  I have several websites and chrome/firefox extensions. 
  Ideal role involves using go or typescript.

p0ccon The PCAP – single file with 50 different protocols

Not really. It's kind of like going to Project Gutenberg and zipping together the first chapter of every work. And then advertising it as "This is a sampling of literature!"

I mean it is, but most people wouldn't read literature that way.

p0ccon The PCAP – single file with 50 different protocols

DM me. Also, take a look at tshark.dev.

p0ccon The PCAP – single file with 50 different protocols

This is like asking for a "universal vehicle". Some people want a truck while others want a forklift. It would also not be economical to make a truck extensible so that forklift components could be later tacked on. What vehicle you use depends on the goods you carry.

Likewise, the protocols do different things at different layers. Some are nested like Ethernet/IP/TCP/HTTP. TCP ensures delivery while UDP does not.

p0ccon The PCAP – single file with 50 different protocols

If you work in the networking industry, pcaps are used to troubleshoot networks. I see guys walking around with t-shirts with "pcaps or it didn't happen". The behavior of protocols or the data in their fields can point exactly to what is failing, and a pcap captures this.

If you want to search for protocols in packet captures, I created tshark.dev/search/pcaptable/ for this exact purpose. Search 1000+ protocols from 6000+ packet captures.

---

Per capinfos, the author merged a bunch of pcap files with `mergecap` from Wireshark's sample captures. It has 38 interfaces, which is the highest I've ever seen!

  $ tshark -r ultimate.pcapng -T fields -e frame.protocols | sed -e 's/:/\n/g' | sort | uniq | wc -l
  69

Looks like it's actually 69 protocols, which makes it quite novel as a packet capture.

p0ccon The PCAP – single file with 50 different protocols

> The choice to store two lengths in the packet header means that you can record both the actual wire length--the number of bytes that came in--and a bigger number that says where the next record starts, and any metadata you like in the gap.

> There is a very complicated "NG" pcap format, but nobody uses it.

This is the reason that pcapng was created - to formalize the structure of this metadata. pcapng "Pcap Next Generation" (2006) is an update to the pcap format (which originated with libpcap/tcpdump in the 90s). It's used in the networking industry as it's the default output file of wireshark, tshark, and tcpdump to capture traffic. If you use these tools, chances are that you have pcapng files.

The biggest reason to use it over pcap (in networking) is that you can save packets from multiple network interfaces. If you have a wireless access point and want to capture both ethernet and 802.11 traffic in the same capture, pcapng would be necessary.

p0ccon A Map of Mathematics

I love this map of mathematics, but in explaining concepts, the website shows unfurling images that scrolljack[0]. The inability to scroll back up makes me feel trapped in the content.

[0]: https://medium.com/@paonecreative_87456/scrolljacking-the-us...

p0ccon Expanding the Attack Surface: React Native Android Applications

Are you sure? I am not seeing the same behavior.

p0ccon Show HN: Chatistics – Turn Telegram, WhatsApp, Messenger Chatlogs to DataFrames

It may be helpful if you link to the specific API export you are referencing.

p0ccon Consumers who sought cash settlement from Equifax probably won't get full $125

Insider Trading [0] is a crime in the US.

[0]: https://en.wikipedia.org/wiki/Insider_trading

p0ccon Diagram.codes

How does this compare to similar products in this space?

I'm thinking of diagramming tools that are based on text, like Graphviz, Mermaid, PlantUML, and Webgraphviz.

p0ccon An introduction to data processing on the Linux command line

Yeah this article is about processing text data and not any form of statistics, modeling, etc. I'm guessing they added "data science" because it's in vogue? In any case, the provided title does not reflect the article.

p0ccon Show HN: Browser extensions to disable Slack's new WYSIWYG editor

These extensions have been registered:

  * Firefox: https://addons.mozilla.org/en-US/firefox/addon/disable-slack-wysiwyg/
  * Chrome: https://chrome.google.com/webstore/detail/jenojkbpialbgpbgokiakifhpmoponjn

Based on the script by Kevin Fahy [1] and multiple discussions [2] [3] about Slack's new interface.

Let me know if you have any questions.

  [1]: https://github.com/kfahy/slack-disable-wysiwyg-bookmarklet
  [2]: https://news.ycombinator.com/item?id=21589647
  [3]: https://news.ycombinator.com/item?id=21591950

p0ccon Disable new Slack WYSIWYG editor with this bookmarklet

I made a firefox/chrome extension based on this script.

  * Firefox Addon: https://addons.mozilla.org/en-US/firefox/addon/disable-slack-wysiwyg/
  * Chrome Extn: Pending Review
  * Source: https://github.com/pocc/no-wysiwyg

edit: formatting

p0ccon Slack’s new WYSIWYG input box is terrible

I made a firefox/chrome extension [1] based on Kevin Hafy's script [2].

Firefox Addon: https://addons.mozilla.org/en-US/firefox/addon/disable-slack... Chrome Extn: Pending Review

Per Sean0-'s comment, it looks like this might not be necessary though.

Edited: formatting

[1]: https://github.com/pocc/no-wysiwyg [2]: https://github.com/kfahy/slack-disable-wysiwyg-bookmarklet

p0ccon Don't Use VPN Services

I agree with you - the gist does have a caveat. The title is still misleading as VPN Services is too broad for the gist's content.

p0ccon Don't Use VPN Services

The title is misleading because the article focuses on using VPN providers to obfuscate traffic when this is one use case of VPN technologies. The gestalt types of VPN usage are:

* Remote Access VPN: Connect to resources on your corporate network. An example of this is you're in a coffee shop on holiday and need to access a corporate resource.

* Site-to-Site VPN: Connect networks on two sites together. An example of this is you're in a branch office and need to connect to a resource in HQ.

Note that VPN providers give you a limited Remote Access VPN to their network, which they control. They can do whatever they want to your now-decrypted traffic before they send it out to the internet. If you want to obfuscate your traffic, Tor is a better candidate.

p0ccon Pizza Hut’s First Website

This is not strictly Pizza Hut's first website.

Pizza Hut's first website was built in 1994 [1]. This webpage has Javascript (1995) [2] running Google Tag Manager (2012) [3]. The article about Pizza Hut's first website [1] provides more context than just the webpage.

[1]: https://thehistoryoftheweb.com/postscript/pizzanet/

[2]: https://en.wikipedia.org/wiki/JavaScript#History

[3]: https://en.wikipedia.org/wiki/List_of_Google_products#Advert...

p0ccon Attempting to Use GNU Guix

Thank you for shedding light on a distro I didn't know existed!

One tip: The contrast on your code blocks is terrible with white text against a light white background. Consider changing the `background` of line 3 of style.css to `purple`, `darkorange`, or some other dark color.